From:	 "David A. Gatwood" <dgatwood@gatwood.net>
To:	 mklinux-announce@lists.apple.com, mklinux-users@lists.apple.com
Subject: MkLinux Packages Update
Date:	 Wed, 31 Oct 2001 17:06:09 -0800 (PST)

Updates for BIND (9.1.3), OpenSSH (2.9p2), and OpenSSL (0.9.6b) are
available on ftp.mklinux.org in /pub/contrib/NOT_FOR_EXPORT and
/pub/contrib/redhat, according to exportability.  These have been tested
for about three months on our systems here, and no issues have been found.

These do not fix any particularly noteworthy security holes that I'm aware
of (hence there was no cause for a rushed release), but the OpenSSL
upgrade makes it harder to guess passwords based on key timings.  This
also adds sftp server support to OpenSSH, and brings BIND up to something
remotely current.  :-)

Be aware that BIND 9 (when not used as a caching-only server) requires
adding a $TTL line to your zone files.  As such, it is not quite a drop-in
replacement, so plan accordingly.  It has been tested in a mixed
environment with slaves running BIND 8 and works correctly, albeit with
warnings.  It is, however, advisable to upgrade all your servers at about
the same time for convenience.


Enjoy!
The MkLinux Team
_______________________________________________
mklinux-announce mailing list
mklinux-announce@lists.apple.com
http://www.lists.apple.com/mailman/listinfo/mklinux-announce